资深安全工程师（合规）
Staff Security Engineer (Compliance)
#### 公司简介
**我们是谁**
Moveworks 是一个代理型 AI 助手平台，赋能整个员工团队。
我们的平台使员工可以通过自然语言与所有业务系统进行对话，快速找到答案并自动化任务。依托世界上最先进的 LLM、我们自有的模型以及复杂的代理型 AI 平台，我们正在通过让 AI 主动行动、简化复杂流程并持续学习和适应来改变工作的完成方式。
Moveworks 被全球超过 350 家最大的公司中 550 万名员工所信赖，其中包括 10% 的财富 500 强企业，用于自动化日常任务并优化业务运营。Moveworks 被列入福布斯 Cloud 100 和 AI 50 榜单，还被 Fast Company 评为 2025 年最具创新力的公司之一，并在 Inc 的 Best in Business 评选中获得最佳创新类别奖项。Moveworks 还在 2025 年获得微软年度合作伙伴奖，并于 2024 年获得 AI Breakthrough 奖项。
2025 年 12 月，Moveworks 被 ServiceNow 收购，标志着我们在为所有业务系统打造统一工作入口的旅程中迈出了关键一步。通过将 ServiceNow 领先的工作流自动化能力与 Moveworks 的推理引擎和自然语言能力相结合，我们为每个人和每个工作流提供 AI 平台。我们构建的平台超越了基本摘要，以实现有意义的业务影响。我们的 AI 在企业系统之间协同运作，将对话转化为已完成的工作。
加入我们的团队，你将站在 AI 变革的最前沿，拥有 ServiceNow 的全球规模和高增长公司的敏捷性支持。我们寻找世界级的人才，帮助我们将代理型 AI 扩展到企业每个角落的每位员工。
欢迎加入我们！
**ServiceNow**
一切始于工程师 Fred Luddy 为他的同事 Phyllis 编写了一段代码，自动完成了她繁琐的任务。她感动得热泪盈眶。这一时刻激发了 Fred 建立一家能够为所有人做这件事的公司的想法——让人们摆脱琐事，专注于更有意义的工作。如今，ServiceNow 是企业重塑的 AI 控制塔。我们的 ServiceNow AI 平台整合任何 AI、任何数据和任何工作流，帮助 85% 的财富 500 强企业更聪明、更快、更好地工作。我们正在构建一个 AI 原生文化，让技术和人才无坚不摧。而我们才刚刚开始。
查看英文原文
#### Company Description
**Who we are**
Moveworks is the Agentic AI Assistant platform that empowers the entire workforce.
Our platform enables employees to converse with all of their business systems through natural language to quickly find answers and automate tasks. Powered by the world's most advanced LLMs, our proprietary models, and a sophisticated Agentic AI platform, we're transforming how work gets done by allowing AI to take initiative, streamline complex workflows, and continuously learn and adapt.
Moveworks is trusted by over 5.5 million employees at more than 350 of the world’s largest companies, including 10% of the Fortune 500, to automate everyday tasks and streamline business operations. Recognized on the Forbes Cloud 100 and AI 50 lists, Moveworks was also named one of Fast Company’s 2025 Most Innovative Companies and Inc’s Best in Business, in the Best in Innovation category. Moveworks was also recognized at Microsoft’s 2025 Partner of the Year and in 2024, received the AI Breakthrough Award.
In December 2025, Moveworks was acquired by ServiceNow, marking a pivotal milestone in our journey to create a single front door to work for all business systems. By combining ServiceNow’s leading workflow automation with Moveworks’ Reasoning Engine and natural language capabilities, we deliver the AI platform for every person and every workflow. Built to go beyond basic summaries to deliver meaningful business impact. Together, our AI acts across enterprise systems to turn conversations into completed work.
By joining our team, you’ll be at the forefront of the AI transformation, backed by the global scale of ServiceNow and the agility of a high-growth company. We are looking for world-class talent to help us extend agentic AI to every employee across every corner of the business.
Come join us!
**ServiceNow**
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.
Join us to put AI to work for people.
#### Job Description
Security compliance is still mostly manual work: screenshots, spreadsheets, and evidence pulled together by hand in the weeks before an audit. We want to run it the opposite way. This role builds the automation so evidence collection and control monitoring happen continuously, and we could pass an audit in any given month because the system is always current. You will treat compliance as code, and you will care about getting the controls right, not just getting them checked. Your mission will be to replace legacy compliance processes with intelligent, automated platforms that scale effortlessly. We want someone who looks at traditional compliance and thinks, "There has to be a better way." You are an AI-native engineer who knows how and when to apply AI across the entire compliance engineering lifecycle—from writing software and automating evidence collection to validating controls, generating documentation, streamlining audits, and building the next generation of compliance automation.
This is an IC tech lead role. You will be hands on.
You will own the software engineering behind our compliance certifications, leading technical engagements with external auditors for ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, SOC 2 Type 2, CSA STAR Level 2, and future certifications. Rather than treating audits as periodic projects, you will build and operate systems that keep our controls continuously validated and our evidence continuously available. Success means audits become a confirmation of how we already operate.
Your vision will color the blueprint of our compliance strategy, propelling Moveworks not just to meet the future but to define it. Ready to make a monumental impact? Join us and transform the essence of compliance at Moveworks.
**What you get to do in this role:**
- Build and own automated evidence collection pipelines that integrate with cloud infrastructure, identity providers, source control, ticketing systems, and other security tooling.
- Design and implement continuous control monitoring, ensuring compliance is measured in real time rather than only during audit periods.
- Challenge the status quo of compliance. Replace manual, paper-driven processes with software and engineering-first systems. We're looking for builders who believe compliance should be automated, elegant, and designed—not buried in paperwork.
- Own the technical strategy for future certifications and regulatory frameworks, evaluating new requirements and designing scalable solutions that minimize operational overhead.
- Use AI where it fits. Apply LLMs and agents to map controls to evidence, validate it, and flag drift.
- Spearhead compliance initiatives such as ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, SOC 2 Type 2, CSA STAR Level 2, NIST 800-171, GDPR, etc.
- Navigate auditor relationships with adept expertise, ensuring smooth and compliant audits.
- Lead and drive the charge in partnering with key stakeholders to ensure compliance and controls are effectively implemented, and any findings are remediated.
- Create and transform documentation such as policies, procedures, and other compliance written material.
#### Qualifications
**To be successful in this role you have:**
- US Citizenship required
- 8+ years of experience in information security roles, with a specific focus on security compliance and risk management.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field. Advanced degrees or certifications (e.g., CISM, CISSP, CISA) are preferred.
- A bias to remove manual work. When you see a recurring manual task, your instinct is to automate it away.
- Demonstrated experience in developing, managing, and implementing security policies and compliance frameworks such as ISO 27001, ISO 42001, NIST, GDPR, and SOC 2 Type 2.
- Knowledge of security principles, controls, and technologies/products.
- Familiarity with cloud security practices and cloud provider compliance standards (AWS, Azure, GCP).
- Expertise with AWS services.
- Exceptional communication, written, and presentation skills capable of engaging a wide range of stakeholders.
- Skills in identifying security risks, implementing mitigation strategies, and driving remediation end-to-end.
- Experience with navigating international and domestic security regulations.
#### Additional Information
**Work Personas**
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. [Learn more here](https://careers.servicenow.com/life-at-servicenow#workpersonas). To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
**Equal Opportunity Employer**
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
**Accommodations**
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [globaltalentss@servicenow.com](mailto:globaltalentss@servicenow.com) for assistance.
**Export Control Regulations**
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.